This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File:                     _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier:          dmGivxQq4q4qPD4lVIeZ5AKRMk1C6fxYbsUbJIjR9dA=
Subject key identifier:   EE:1E:2C:50:4C:27:3C:5D:A0:20:EE:4A:D0:50:1C:1A:E9:94:C7:7A
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer:       /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial:       019C4359113452123F0905E3269077E46C6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number:          0E94
Signing time:             Mon 09 Feb 2026 17:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:36 +0000
Files and hashes:         1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: zwXI5UDsk96V+PnqcR4XJn2+gd8i7LKeNj3uoXva7ag=)
                          2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:11:34:52:12:3f:09:05:e3:26:90:77:e4:6c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
        Validity
            Not Before: Feb  9 17:00:36 2026 GMT
            Not After : Feb 10 17:00:36 2026 GMT
        Subject: CN=ee1e2c504c273c5da020ee4ad0501c1ae994c77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:cc:f0:b7:17:da:3e:54:53:bc:2b:5d:8e:
                    d5:66:e6:25:05:88:7b:e5:79:4d:ce:81:f0:4b:d0:
                    06:d7:b6:06:47:aa:05:0e:1e:20:32:61:37:6e:95:
                    e6:8f:b9:d7:32:35:0f:52:83:79:f9:c3:37:af:42:
                    6d:a5:6e:c7:39:e9:09:17:e5:dc:cd:6d:76:bf:79:
                    b7:f6:dc:96:75:6b:93:a6:98:12:66:ba:ec:9e:d2:
                    f5:1e:9d:54:77:9e:24:cc:45:cc:5b:41:e8:da:a0:
                    81:b1:b9:0d:75:91:77:56:92:24:bc:1e:57:19:25:
                    80:6d:d6:77:ce:58:23:8b:eb:9c:45:25:8f:89:22:
                    55:d0:ea:dd:b9:41:b2:27:01:dc:34:59:06:ad:d3:
                    a4:c8:a4:f5:b5:a3:13:5b:09:0a:1a:9d:18:37:08:
                    91:e2:36:f1:e0:3d:c5:97:16:01:67:b4:2e:ef:e5:
                    3f:1c:70:13:45:a0:e2:84:4b:c1:40:08:62:64:bb:
                    f7:20:2b:54:7a:a1:9d:dc:83:a1:30:3a:9a:eb:3c:
                    81:3b:d3:27:e5:94:99:6d:86:18:d4:4d:f9:26:c8:
                    39:f8:5c:0f:98:8c:a8:3d:15:1b:a1:83:b7:85:ea:
                    c9:62:0a:8f:0e:62:13:d7:30:b3:97:af:fb:46:cd:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:2C:50:4C:27:3C:5D:A0:20:EE:4A:D0:50:1C:1A:E9:94:C7:7A
            X509v3 Authority Key Identifier:
                keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:01:3c:be:58:9e:9d:1e:39:5f:8e:81:f5:cf:88:6d:f8:
         6a:31:ec:f7:bf:b5:e4:2e:b2:e9:1c:c8:37:2c:3a:b3:c8:41:
         41:db:b3:76:37:79:74:09:38:0f:0b:b3:de:b6:a1:b7:40:30:
         72:50:d7:96:56:2c:34:8b:c8:cb:c1:13:6a:25:2d:52:d3:90:
         6c:ef:a6:e6:c0:1d:39:89:c4:67:aa:01:0d:b8:8a:95:28:7f:
         8d:b0:6b:b9:ee:9c:63:2e:c1:15:97:5e:a1:4e:a9:7d:54:8e:
         8b:1c:1d:76:fa:64:c0:bd:37:c9:33:55:11:6b:5b:13:f1:a6:
         d5:db:5a:1c:20:fd:ed:00:7b:48:59:2b:25:39:b7:6f:c1:36:
         4b:43:3b:76:36:8c:26:44:a0:5b:7f:ea:1f:7e:39:34:13:a2:
         b5:68:cb:58:34:ba:9c:08:a4:c0:5e:57:f5:df:5e:a4:42:38:
         91:f3:e5:42:c0:21:db:47:df:3e:73:80:e6:15:ac:2f:b4:52:
         4c:ce:f3:8f:e3:c5:4d:ac:0d:a1:62:91:89:ef:26:ba:1b:c1:
         a2:0a:d7:63:3c:d6:0b:9c:69:4f:0a:d3:78:97:50:d7:62:7b:
         8d:67:72:94:d6:0e:30:03:0d:10:af:8c:25:48:9b:2a:3a:86:
         b1:54:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:33 2026 by rpki-client